14. Amazon S3: Buckets, Objects, Policies and Presigned URLs

14.6 Presigned URLs: Temporary Private Access

By Ravindra Bagale · Last updated: 27 September 2026

Bucket private aahe, pan user la ek video 10 minutes sathi baghu dyaycha aahe – kasa? Presigned URL. Server aaplya credentials ne ek URL "sign" karto; tya URL madhe expiry time aani signature asto. Expiry nantar URL band.

aws s3 presign s3://ravindra-demo-files-pune/site/index.html --expires-in 600   # 600 seconds

The output looks like this (shortened):

https://ravindra-demo-files-pune.s3.ap-south-1.amazonaws.com/site/index.html
  ?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA.../ap-south-1/s3/aws4_request
  &X-Amz-Date=20260927T043000Z&X-Amz-Expires=600&X-Amz-Signature=5f2c...

In PHP (AWS SDK for PHP – we use exactly this in the project chapter):

<?php
require __DIR__ . '/vendor/autoload.php';
$s3  = new Aws\S3\S3Client(['region' => 'ap-south-1']);   // credentials come from the IAM role
$cmd = $s3->getCommand('GetObject', ['Bucket' => 'ravindra-reels-media-pune', 'Key' => 'videos/a1.mp4']);
$url = (string) $s3->createPresignedRequest($cmd, '+15 minutes')->getUri();
echo $url;